$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa File: 2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa (raw, json) Hash identifier: wQqOe75uUxrV0Ny/yC/27w6zeSE0zDJpN8ohY7mD2Fg= Subject key identifier: E9:2F:13:44:40:89:F6:F4:93:DA:0A:BF:FF:3C:F7:FF:1D:80:87:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F06729B4AC5B1F7A7071FDF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 207.162.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9b:4a:c5:b1:f7:a7:07:1f:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=d160fccf-33dc-48ca-8c62-aa7852f5846e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:57:38:1d:f4:70:44:8f:83:bd:11:70:58: 42:fd:fd:f8:5d:76:be:a0:46:08:4c:d3:97:99:e0: f3:51:98:d7:0e:7a:6d:b2:47:db:89:8b:07:23:ba: 9f:0e:4f:9e:6f:7b:b8:d6:24:d6:73:f8:a9:cd:b8: f2:6e:bd:e9:38:ef:6a:78:22:b6:a7:56:ce:5f:74: 34:99:55:f8:ae:92:8a:b1:78:55:7b:af:fb:b3:e3: 11:88:85:fe:44:9f:f7:65:11:ea:07:bb:c1:50:e9: c8:4f:fc:8a:1b:8d:10:62:72:90:73:f1:29:51:d8: aa:67:6a:48:07:61:53:f8:99:bc:fa:3f:96:64:40: 4d:58:5c:23:64:34:09:45:98:0d:80:9a:a1:c6:55: 22:40:a7:cb:be:35:fd:89:3b:80:41:0b:f8:88:bf: a5:93:ce:a3:55:b9:e6:b8:88:cd:bd:86:82:01:68: 1e:a0:7c:fc:03:5e:df:39:2c:ff:d2:14:c8:35:34: 78:07:ef:51:05:ff:88:78:40:d5:6d:53:0e:f8:52: 07:44:9b:ec:c7:c1:d8:f7:cf:48:02:b2:da:35:c6: 32:e4:a3:e8:2e:a8:fa:b4:44:05:d7:18:cf:0b:22: a8:b2:b9:38:b5:6d:92:7c:c5:cd:07:15:b7:62:41: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2F:13:44:40:89:F6:F4:93:DA:0A:BF:FF:3C:F7:FF:1D:80:87:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce085b9-c1e2-38f5-b2e2-c503a58b6cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 207.162.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:44:81:70:81:3d:ee:78:76:59:bb:ff:a3:20:0c:4a:7c:8d: 14:de:09:c6:f9:39:d6:dd:43:ef:f8:9c:47:ca:bf:a6:8c:30: 33:8f:a0:03:3a:0d:2a:d8:98:fd:e0:7b:b2:04:08:4c:ef:1c: 85:c0:d2:df:4f:2e:fa:ec:0d:db:8e:25:ce:7d:c8:c1:fc:98: d4:d9:e8:ed:af:13:39:28:94:90:2c:90:e4:cc:84:88:6c:ce: af:0e:00:3b:f0:95:ae:ab:d8:e5:e0:28:ad:a8:1a:27:b0:b1: f5:1e:ed:a9:ed:98:08:e2:db:49:2b:28:10:ed:d4:14:15:a8: 6c:e0:f5:77:22:15:60:a2:b4:09:cb:9d:e5:39:39:0f:2a:3d: bc:b3:ff:0f:7a:c1:b6:26:11:8c:e0:1b:5a:12:28:49:5e:be: fb:d5:87:12:0f:42:10:96:1c:44:c5:64:22:cd:4e:3b:13:78: 16:bd:b5:18:ee:48:8f:a1:83:5c:6f:4e:37:d8:0a:ca:36:6d: 65:08:57:36:eb:fc:97:a1:c3:5e:68:12:06:3f:99:a5:3f:ba: 82:90:b1:80:7a:c4:95:e7:ea:ff:7c:e2:73:23:4f:8e:13:70: ea:4d:c1:82:bd:9e:17:b1:cf:53:dc:ff:03:9b:29:6e:9e:e2: 75:11:e5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcptKxbH3pwcf3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDE2MGZjY2YtMzNkYy00OGNhLThjNjItYWE3ODUyZjU4NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRdXOB30cESPg70RcFhC/f34XXa+oEYITNOX meDzUZjXDnptskfbiYsHI7qfDk+eb3u41iTWc/ipzbjybr3pOO9qeCK2p1bOX3Q0 mVX4rpKKsXhVe6/7s+MRiIX+RJ/3ZRHqB7vBUOnIT/yKG40QYnKQc/EpUdiqZ2pI B2FT+Jm8+j+WZEBNWFwjZDQJRZgNgJqhxlUiQKfLvjX9iTuAQQv4iL+lk86jVbnm uIjNvYaCAWgeoHz8A17fOSz/0hTINTR4B+9RBf+IeEDVbVMO+FIHRJvsx8HY989I ArLaNcYy5KPoLqj6tEQF1xjPCyKosrk4tW2SfMXNBxW3YkHJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkvE0RAifb0k9oKv/889/8dgIdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNlMDg1YjktYzFlMi0z OGY1LWIyZTItYzUwM2E1OGI2Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6KCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpEgXCBPe54dlm7/6MgDEp8jRTeCcb5OdbdQ+/4nEfKv6aMMDOPoAM6 DSrYmP3ge7IECEzvHIXA0t9PLvrsDduOJc59yMH8mNTZ6O2vEzkolJAskOTMhIhs zq8OADvwla6r2OXgKK2oGiewsfUe7antmAji20krKBDt1BQVqGzg9XciFWCitAnL neU5OQ8qPbyz/w96wbYmEYzgG1oSKElevvvVhxIPQhCWHETFZCLNTjsTeBa9tRju SI+hg1xvTjfYCso2bWUIVzbr/Jehw15oEgY/maU/uoKQsYB6xJXn6v984nMjT44T cOpNwYK9nhexz1Pc/wObKW6e4nUR5R0= -----END CERTIFICATE-----Generated at Sun Sep 20 16:22:38 2026 by rpki-client